TI-2023-03981 CVE-2023-4307 · GHSA-pj3h-qmr5-3qpvLock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRFPriority MEDIUM 53The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF atta…CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00252 · Published 2023-09-11 · No fix listed